You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
100 lines
3.4 KiB
100 lines
3.4 KiB
-- ------ extra functions ------ --
|
|
|
|
function rule_check() -- determine if rule needs a protocol specified
|
|
local sport = ut.trim(sys.exec("uci get -p /var/state mwan3." .. arg[1] .. ".src_port"))
|
|
local dport = ut.trim(sys.exec("uci get -p /var/state mwan3." .. arg[1] .. ".dest_port"))
|
|
if sport ~= "" or dport ~= "" then -- ports configured
|
|
local proto = ut.trim(sys.exec("uci get -p /var/state mwan3." .. arg[1] .. ".proto"))
|
|
if proto == "" or proto == "all" then -- no or improper protocol
|
|
err_proto = 1
|
|
end
|
|
end
|
|
end
|
|
|
|
function rule_warn() -- display warning message at the top of the page
|
|
if err_proto == 1 then
|
|
return "<font color=\"ff0000\"><strong>WARNING: this rule is incorrectly configured with no or improper protocol specified! Please configure a specific protocol!</strong></font>"
|
|
else
|
|
return ""
|
|
end
|
|
end
|
|
|
|
function cbi_add_policy(field)
|
|
uci.cursor():foreach("mwan3", "policy",
|
|
function (section)
|
|
field:value(section[".name"])
|
|
end
|
|
)
|
|
end
|
|
|
|
function cbi_add_protocol(field)
|
|
local protos = ut.trim(sys.exec("cat /etc/protocols | grep ' # ' | awk '{print $1}' | grep -vw -e 'ip' -e 'tcp' -e 'udp' -e 'icmp' -e 'esp' | grep -v 'ipv6' | sort | tr '\n' ' '"))
|
|
for p in string.gmatch(protos, "%S+") do
|
|
field:value(p)
|
|
end
|
|
end
|
|
|
|
-- ------ rule configuration ------ --
|
|
|
|
dsp = require "luci.dispatcher"
|
|
sys = require "luci.sys"
|
|
ut = require "luci.util"
|
|
arg[1] = arg[1] or ""
|
|
|
|
err_proto = 0
|
|
rule_check()
|
|
|
|
|
|
m5 = Map("mwan3", translate("MWAN3 Multi-WAN Rule Configuration - ") .. arg[1],
|
|
translate(rule_warn()))
|
|
m5.redirect = dsp.build_url("admin", "network", "mwan3", "configuration", "rule")
|
|
|
|
|
|
mwan_rule = m5:section(NamedSection, arg[1], "rule", "")
|
|
mwan_rule.addremove = false
|
|
mwan_rule.dynamic = false
|
|
|
|
|
|
src_ip = mwan_rule:option(Value, "src_ip", translate("Source address"),
|
|
translate("Supports CIDR notation (eg \"192.168.100.0/24\") without quotes"))
|
|
src_ip.datatype = ipaddr
|
|
|
|
src_port = mwan_rule:option(Value, "src_port", translate("Source port"),
|
|
translate("May be entered as a single or multiple port(s) (eg \"22\" or \"80,443\") or as a portrange (eg \"1024:2048\") without quotes"))
|
|
|
|
dest_ip = mwan_rule:option(Value, "dest_ip", translate("Destination address"),
|
|
translate("Supports CIDR notation (eg \"192.168.100.0/24\") without quotes"))
|
|
dest_ip.datatype = ipaddr
|
|
|
|
dest_port = mwan_rule:option(Value, "dest_port", translate("Destination port"),
|
|
translate("May be entered as a single or multiple port(s) (eg \"22\" or \"80,443\") or as a portrange (eg \"1024:2048\") without quotes"))
|
|
|
|
proto = mwan_rule:option(Value, "proto", translate("Protocol"),
|
|
translate("View the contents of /etc/protocols for protocol descriptions"))
|
|
proto.default = "all"
|
|
proto.rmempty = false
|
|
proto:value("all")
|
|
proto:value("ip")
|
|
proto:value("tcp")
|
|
proto:value("udp")
|
|
proto:value("icmp")
|
|
proto:value("esp")
|
|
cbi_add_protocol(proto)
|
|
|
|
use_policy = mwan_rule:option(Value, "use_policy", translate("Policy assigned"))
|
|
cbi_add_policy(use_policy)
|
|
use_policy:value("unreachable", translate("unreachable (reject)"))
|
|
use_policy:value("blackhole", translate("blackhole (drop)"))
|
|
use_policy:value("default", translate("default (use main routing table)"))
|
|
|
|
|
|
-- ------ currently configured policies ------ --
|
|
|
|
mwan_policy = m5:section(TypedSection, "policy", translate("Currently Configured Policies"))
|
|
mwan_policy.addremove = false
|
|
mwan_policy.dynamic = false
|
|
mwan_policy.sortable = false
|
|
mwan_policy.template = "cbi/tblsection"
|
|
|
|
|
|
return m5
|